With the recent vpn filter attacks, and talks about the hackers wanting to attack our SCADA systems in the U.S. I want to setup a honeypot to monitor the attackers and learn more about how they operate. I found this link but think it may be outdated since it talks about ubuntu 12. Does anyone know of any modbus scada honeypot guides out there?



One of the main problems about ICS Honeypots has always been the variety of deployments that are out there. Anyway, you have some opensource ICS Honeypots that are under continuous development: One of them is Conpot (which is the one used in your post). It is python based, so you shouldn't have problems deploying it in a newer Linux distribution (or you may deploy it in a container fashion, which works great).

You should find that Conpot simulates most of the industrial technologies you'll need.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.